Module
Alerts
A match is only useful if it reaches the right person in time and the reason for the match can be shown afterward. Both halves of that sentence are the module.
Authorized lists onlyEach list is tied to a permitted purpose defined in the agency policy.
Logged accessDate, query, person and purpose, on every lookup.
Time boundedNon-matching reads fall under the program retention window.
How it is bounded
An alert system earns its place by what it refuses to do
Plate data is sensitive precisely because it is location data over time. The controls below are not optional settings we turn on for cautious clients. They are how the module ships.
- Purpose is recorded at the moment of the query, not assumed.
- Sharing outside the agency follows the policy, and the policy is public.
- Facial recognition is not part of the scope of this module.
Roles
Who may query, who may export, who may administer, named by job title.
Audit
Access logs exportable for the periodic audits several statutes require.
Retention
Separate windows for hits and non-hits, set per jurisdiction.
Review the controls with your counsel
We will walk through the policy template and the audit exports.